Removable, active, personal storage device, system and method
A storage device is configured to communicate with a host device over a Bluetooth connection. The storage device includes a flash memory, a processor, and a Bluetooth controller. The memory stores at least one permission for determining access to the memory. The processor manages access to the memory, independently of the host device, based on a comparison of a request at the removable storage device to access the memory to at least one permission. The comparison is independent, requiring no management by an operating system of the host device, such that if the at least one permission includes a particular access type that matches the access requested in the request, the processor provides access to the memory.
1. A removable storage device configured to communicate with a host device over a data connection, the removable storage device comprising:
a memory for storing at least one permission for determining access to the memory;
a processor for managing access to the memory, independently of the host device, based on a comparison of a request at the removable storage device to access the memory to at least one permission, the comparison being independent, requiring no management by an operating system of the host device, such that if the at least one permission includes a particular access type that matches the access requested in the request, the processor provides such access to the memory, and alternatively if the at least one permission does not include a particular access type that matches the access requested in the request, the processor denies such access to the memory; and
a data controller for communicating with the host device via the data connection and, if permitted, for transmitting data from the processor.
2. The removable storage device of claim 1 , further comprising: a RAM component for storing data for performing said at least one instruction of said data processor.
3. The removable storage device of claim 1 , further comprising: a cryptographic chip for encrypting and decrypting data.
4. The removable storage device of claim 3 , wherein said cryptographic chip performs an authentication process.
5. The removable storage device of claim 3 , wherein said cryptographic chip emulates a smart card.
6. The removable storage device of claim 5 , wherein said cryptographic chip stores encrypted smart card data.
7. The removable storage device of claim 3 , wherein said cryptographic chip performs encryption immediately upon receiving a command from said processor.
8. The removable storage device of claim 7 , wherein said cryptographic chip creates a cryptographic signature with a hash immediately upon receiving a command from said processor.
9. The removable storage device of claim 3 , wherein said cryptographic chip further comprises a cryptographic chip memory for storing at least one cryptographic key and at least one cryptographic instruction for encrypting and decrypting data, such that said cryptographic chip forms a removable encryption engine.
10. The removable storage device of claim 9 , wherein said encrypted data is stored on said cryptographic chip memory.
11. The removable storage device of claim 10 , wherein said cryptographic chip memory is a separate memory device from said memory device.
12. The removable storage device of claim 10 , wherein said cryptographic chip memory is said memory device.
13. A method for determining whether to provide access to a memory, the method comprising:
receiving a request to access a memory at an access control module, independent of a host device, the access control module configured to communicate with the host device over a data connection; and
managing access to the memory with a processor of the access control device, independent of the host device, based on a comparison of the request to at least one permission for determining access to the memory, the comparison being independent of, and requiring no management by, an operating system of the host device; wherein managing access to the memory comprises:
providing, with a processor of the access control module, access to the memory in response to determining that the at least one permission includes a particular access type that matches the access requested in the request; and
denying, with a processor of the access control module, access to the memory in response to determining that the at least one permission does not include a particular access type that matches the access requested in the request.
14. The method of claim 13 , wherein credit card information is stored in the memory.
15. The method of claim 13 , wherein biometric information is stored in the memory.
16. The method of claim 13 , wherein audio information is stored in the memory.
17. The method of claim 13 , wherein network access information is stored in the memory.